Subject: Re: [PATCH 0/3] Fix for IPsec leakage with SELinux enabled - V.03

From: Evgeniy Polyakov <[email-masked]>
Date: Sun, 8 Oct 2006 14:35:40 +0400

On Thu, Oct 05, 2006 at 03:42:13PM -0500, Venkat Yekkirala ([email-masked]) wrote:
> This version takes into account David Miller's comments
> regarding treatment of security layer errors in the case
> of socket policies. Specifically, these errors will be
> treated like how these kind of errors are treated for
> the main/sub policies, which is to return a full lookup
> failure.

I applied all three patches and rerun my acrypto tests, which do not
show any unencrypted packets anymore, so I ack this changes since they
fix the problem.
Thanks.

-- 
	Evgeniy Polyakov